generated: '2026-08-02'
method: searched
source: https://insurance.arbol.io/license-information
description: >-
  Arbol publishes no machine-readable API contract, so no API-level or
  cross-cutting technical standard (OAuth 2.0, OIDC, RFC 9457, JSON:API, OData,
  SCIM, FAPI, pagination, idempotency) can be asserted or derived — see
  contract-discovery.yml. What Arbol does publish is a substantive insurance
  regulatory and data-protection posture, captured below from its own pages.
api_standards:
  assertable: false
  reason: no OpenAPI, GraphQL, AsyncAPI or MCP contract published
  standards: []
regulatory:
- id: us-state-insurance-licensure
  conforms: true
  evidence: 'Arbol Insurance Services LLC is licensed as a property & casualty and
    surplus lines insurance agency in all states in which insurance is offered; state
    license numbers published.'
  url: https://insurance.arbol.io/license-information
- id: am-best-rated-carrier
  conforms: true
  evidence: 'Underwriting authority up to $5,000,000 per policy from an A.M. Best
    "A" rated carrier; ratings disclosure dated 7.18.23 published on the license page.'
  url: https://insurance.arbol.io/license-information
- id: lloyds-coverholder
  conforms: true
  evidence: 'Lloyd''s coverholder status (US) and, for Arbol Insurance Services UK
    Ltd, backing by an A.M. Best "A" rated Lloyd''s syndicate distributed through
    the Lloyd''s global licensing network.'
  url: https://insurance.arbol.uk/
- id: fca-regulated-mga
  conforms: true
  evidence: Arbol Insurance Services UK Ltd operates as an FCA-regulated Managing General
    Agent.
  url: https://insurance.arbol.uk/
- id: gdpr-uk-gdpr
  conforms: true
  evidence: Privacy policy documents EU GDPR and UK GDPR / Data Protection Act 2018
    data-subject rights for European and UK users.
  url: https://www.arbol.io/privacy-policy
security_certifications:
  published: false
  checked: [SOC 2, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA, FedRAMP, CSA STAR]
  note: No trust center and no named security certification was found on any Arbol
    host (see security/ probe results). Absence recorded, not inferred.
x-evidence:
  fetched: '2026-08-02'
  pages: ['https://insurance.arbol.io/license-information', 'https://insurance.arbol.io/legal-policies',
    'https://www.arbol.io/privacy-policy', 'https://insurance.arbol.uk/llms.txt']